Create Google Service Account

Make sure you create a service account for the G Suite account that will be linked to FortiCASB. A service account delegated with domain-wide authority is necessary for FortiCASB to visit files in both personal and team drives under your G Suite account.

Without the service account, you can still use FortiCASB. However, the features related to files in FortiCASB, such as Discovery, will not work.

For more information regarding service accounts and domain-wide authority delegation, go to: https://developers.google.com/identity/protocols/OAuth2ServiceAccount#delegatingauthority

Google Service Account Creation Steps:

Go to https://console.developers.google.com and log in with your Google Account.
Click on the drop-down menu of Select a project.

Select an existing project or Create New Project by clicking New Project.

Enter a Project Name and click Create.
Once a project is created, from the Navigation menu, go to IAM & admin > Service accounts.

Click +Create service account.
Enter a "Service account name" of your preference and click create. Service account ID will populate automatically.

Keep the service account ID later for Google drive authentication during installation.

Click Continue when prompted for entering service account permissions.
Click on +Create Key and select P12 to create a private key. The P12 private key will be downloaded automatically, then click Done.

Keep the private key later for Google drive authentication during installation.

Once service account is created, select the service account created and click on under Actions on the right-hand side, then click on Edit.

Enable G Suite Domain-wide Delegation and enter in a Product name for the consent screen, then click Save.

Select View Client ID from service account that was created, and record down the client ID.